mirror of https://github.com/getpaseo/paseo.git synced 2026-10-23 17:52:49 +00:00

Files

T

Mohamed Boudra 7c04eed039 Add protected relay endpoint security with replay protection

Updated peers negotiate Noise_NK_25519_ChaChaPoly_SHA256 inside the
existing e2ee_hello / e2ee_ready exchange and send counter-nonced records
framed with authenticated chunk metadata. Old peers on either side fall
back to the legacy NaCl box channel while the daemon permits it.

Daemon flag daemon.relay.requireProtectedSecurity (default false,
reloadable) refuses legacy relay clients at hello time; pairing offers
and relay URIs then carry minimumSecurityMode=protected. The daemon
advertises server_info.features.relayProtectedSecurity, and a relay
client that negotiated legacy with such a daemon closes 4002 before
admission. The app pins the protected minimum per daemon public key.

Covers getpaseo/paseo#359.

2026-10-21 14:20:49 +02:00

codegen

Split the inbound WebSocket validator per message type (#6847 )

2026-10-16 19:08:03 +02:00

scripts

Split the inbound WebSocket validator per message type (#6847 )

2026-10-16 19:08:03 +02:00

src

Add protected relay endpoint security with replay protection

2026-10-21 14:20:49 +02:00

tests

Split the inbound WebSocket validator per message type (#6847 )

2026-10-16 19:08:03 +02:00

package.json

Connect saved hosts and delegate agents across daemons (#7370 )

2026-10-21 16:10:47 +07:00

README.md

Extract client SDK package (#1052 )

2026-05-28 01:58:18 +08:00

tsconfig.json

Extract client SDK package (#1052 )

2026-05-28 01:58:18 +08:00

README.md

@getpaseo/protocol

Shared Paseo protocol schemas, codecs, and wire types.

Stability

This package is public so Paseo's published packages can depend on it cleanly. It is not a stable public API yet.

Schemas, exports, wire helpers, and types may change or disappear in any release without advance notice. Use it outside Paseo at your own risk until the package is explicitly documented as stable.